Two-factor Authentication (2FA) adds an additional layer of security by requiring not only a password and username but also something that only the user has on them, i.e., a piece of information only they should know or have immediately to hand - such as a physical token. This ensures that even if a password is compromised, unauthorized access is still prevented.